@cortexkit/pi-anthropic-auth 2.0.3 → 2.1.0

package/README.md

@@ -16,7 +16,7 @@ This project is not affiliated with or endorsed by Anthropic. Using Claude subsc
 ## Install
 
 ```bash
-bunx @cortexkit/opencode-anthropic-auth setup
+npx @cortexkit/opencode-anthropic-auth setup
 ```
 
 After setup:

package/dist/custody.js

@@ -26,7 +26,7 @@ export function createPiCustodyCommands() {
             // Mode changes can remove host credentials and require offline consent.
             // A menu never enrolls, grants custody or writes the authority journal.
             return {
-                text: `Refused: Changing Pi authentication to ${mode} requires offline setup. Run \`bunx @cortexkit/opencode-anthropic-auth setup\` and review the migration and host OAuth removal consent.`,
+                text: `Refused: Changing Pi authentication to ${mode} requires offline setup. Run \`npx @cortexkit/opencode-anthropic-auth setup\` and review the migration and host OAuth removal consent.`,
             };
         },
     };

package/dist/stream.d.ts

@@ -1,5 +1,7 @@
-import { type ApiKeyAccount, CacheKeepManager, type MidConversationEffortTransition } from '@cortexkit/anthropic-auth-core';
+import { type ApiKeyAccount, CacheKeepManager, type MidConversationEffortTransition, type QuotaManagerOptions } from '@cortexkit/anthropic-auth-core';
 import { type Api, type AssistantMessageEventStream, type Context, type Model, type SimpleStreamOptions } from '@earendil-works/pi-ai';
+/** Set or clear the test replacement for the wait between quota usage polls. */
+export declare function __setPiQuotaCallPauseForTest(pause: QuotaManagerOptions['pauseBetweenQuotaCalls']): void;
 export declare function clearPiStickyRoutingSession(storagePath: string, sessionId: string): Promise<void>;
 export declare function getPiTrackedCacheKeepSessions(): Promise<import("@cortexkit/anthropic-auth-core").CacheKeepTrackedSession[]>;
 /** Call prewarmNow directly to exercise its provider request without clock or timer mocks. */

package/dist/stream.js

@@ -1,4 +1,4 @@
-import { applyClaudeCodeHeaders, applyCustomHeaders, CACHE_KEEP_EXTENDED_TTL_BETA, CacheKeepManager, CacheKeepSessionRegistry, createProviderErrorResponseScope, createSseFramer, createStickyNoRouteResponse, decideStickyQuotaFailure, decodeSseFrame, dumpDirectRequest, FAST_MODE_BETA, getCache1hPersistentMode, getClaudeCodeIdentityForVerifiedAccount, getDefaultCacheKeepRegistryDirectory, getFallbackReauthLabels, getQuotaCheckIntervalMs, getRoutingMode, getScopedQuotaWindowForModel, getThinkingPrefixMismatchBehavior, hasThinkingBindingControls, isCache1hPersistentlyEnabled, isCacheKeepHybridActive, isDumpPersistentlyEnabled, isFastModePersistentlyEnabled, isKillswitchEnabled, isNativeTransientAccountError, isOAuthAccount, isPermanentRefreshError, isValidApiBaseURL, killswitchPassesPolicy, logger, MID_CONVERSATION_OUTPUT_CONFIG_BETA, mergeAnthropicBetas, NativeVaultNoAccountError, nativeAccountCanServe, parseSseFrame, QuotaManager, quotaBackoffActive, quotaSnapshotHasStandardWindows, quotaSnapshotModelScopeIsExhausted, quotaSnapshotPassesModelScope, quotaSnapshotPassesPolicy, STICKY_ROUTING_MAIN_ACCOUNT_ID, StickySessionRouter, sendViaRelay, setDumpEnabled, shouldFallbackStatus, stickyQuotaSnapshotIsFresh, stickyRetryAfterWithJitter, stickyRouteFamilyForModel, THINKING_BINDING_CONTROLS_BETA, usesMidConversationOutputConfig, } from '@cortexkit/anthropic-auth-core';
+import { applyClaudeCodeHeaders, applyCustomHeaders, CACHE_KEEP_EXTENDED_TTL_BETA, CacheKeepManager, CacheKeepSessionRegistry, createProviderErrorResponseScope, createSseFramer, createStickyNoRouteResponse, decideStickyQuotaFailure, decodeSseFrame, dumpDirectRequest, FAST_MODE_BETA, getCache1hPersistentMode, getClaudeCodeIdentityForVerifiedAccount, getDefaultCacheKeepRegistryDirectory, getFallbackReauthLabels, getQuotaCheckIntervalMs, getRequestGzipLatch, getRequestGzipLatchPath, getRoutingMode, getScopedQuotaWindowForModel, getThinkingPrefixMismatchBehavior, isCache1hPersistentlyEnabled, isCacheKeepHybridActive, isDumpPersistentlyEnabled, isFastModePersistentlyEnabled, isKillswitchEnabled, isNativeTransientAccountError, isOAuthAccount, isPermanentRefreshError, isValidApiBaseURL, killswitchPassesPolicy, logger, mergeAnthropicBetas, NativeVaultNoAccountError, nativeAccountCanServe, parseSseFrame, QuotaManager, quotaBackoffActive, quotaSnapshotHasStandardWindows, quotaSnapshotModelScopeIsExhausted, quotaSnapshotPassesModelScope, quotaSnapshotPassesPolicy, STICKY_ROUTING_MAIN_ACCOUNT_ID, StickySessionRouter, sendViaRelay, sendWithRequestGzip, setDumpEnabled, shouldFallbackStatus, stickyQuotaSnapshotIsFresh, stickyRetryAfterWithJitter, stickyRouteFamilyForModel, } from '@cortexkit/anthropic-auth-core';
 import { calculateCost, createAssistantMessageEventStream, } from '@earendil-works/pi-ai';
 import { buildAnthropicRequest, fromClaudeCodeToolName } from './convert.js';
 import { getPiNativeRuntime, piAttemptAccessToken, } from './native.js';
@@ -11,6 +11,15 @@ let cacheKeepRegistryDirectory;
 const stickyRouters = new Map();
 const quotaManagers = new Map();
 const PI_SERVICE_CACHE_LIMIT = 16;
+/**
+ * Tests only: replaces the real-time wait between quota usage polls in quota
+ * managers created after it is set. Unset, managers keep Core's real timer.
+ */
+let quotaCallPauseForTest;
+/** Set or clear the test replacement for the wait between quota usage polls. */
+export function __setPiQuotaCallPauseForTest(pause) {
+    quotaCallPauseForTest = pause;
+}
 function setBoundedService(map, key, value) {
     map.delete(key);
     map.set(key, value);
@@ -37,11 +46,12 @@ function getPiRoutingServices(storagePath, snapshot) {
     if (!quotaManager) {
         quotaManager = new QuotaManager({
             storage,
+            pauseBetweenQuotaCalls: quotaCallPauseForTest,
             fetchQuotaSnapshot: async (request, dispatch) => {
                 const id = request.kind === 'main' ? 'main' : request.accountId;
                 if (!id)
                     throw new Error('Native quota request has no account identity');
-                return (await native.service()).fetchQuota(id, fetchPiOAuth, undefined, dispatch);
+                return (await native.service()).fetchQuota(id, fetchPiOAuth, undefined, dispatch, request.purpose);
             },
         });
         setBoundedService(quotaManagers, storagePath, {
@@ -74,7 +84,7 @@ function getPiRoutingServices(storagePath, snapshot) {
                 quotas.isFallbackStale(account.id, undefined, options.modelId, account) &&
                 !quotaBackoffActive(account.lastQuotaRefreshError, Date.now())) {
                 try {
-                    await quotas.refreshFallback(account.id, '', account);
+                    await quotas.refreshFallback(account.id, '', account, 'admission');
                 }
                 catch (error) {
                     // A transient account error means another writer is still saving
@@ -122,23 +132,15 @@ function getPiCacheKeepRegistry() {
  * betas this body needs. Model requests and CacheKeep prewarms both call it:
  * a prewarm replays a model request's body, and Anthropic needs the same
  * betas to accept it (for example, the effort beta for the empty
- * `role: "system"` effort markers in a Fable 5.1 body). `leadingBetas` are
- * placed before the body's betas.
+ * `role: "system"` effort markers in a Fable 5.1 body). `leadingBetas` appends
+ * adapter-requested feature betas without changing Core's model-beta selection.
  */
 function applyPiOAuthRequestHeaders(headers, accessToken, options) {
     const { body } = options;
     applyClaudeCodeHeaders(headers, accessToken, {
         body,
         identity: options.identity,
-        extraBetas: [
-            ...(options.leadingBetas ?? []),
-            ...(hasThinkingBindingControls(body)
-                ? [THINKING_BINDING_CONTROLS_BETA]
-                : []),
-            ...(usesMidConversationOutputConfig(body)
-                ? [MID_CONVERSATION_OUTPUT_CONFIG_BETA]
-                : []),
-        ],
+        extraBetas: options.leadingBetas,
     });
     if (body.speed === 'fast')
         headers.set('anthropic-beta', mergeAnthropicBetas(headers.get('anthropic-beta'), [FAST_MODE_BETA]));
@@ -442,7 +444,17 @@ async function sendAnthropicRequest(options) {
         const send = async () => {
             const scope = createProviderErrorResponseScope([secret], 'event-stream');
             physical.scope = scope;
-            return scope.redactResponse(await fetch(input, init));
+            // OAuth bodies go gzipped as Claude Code sends them; `bodyText` stays
+            // the signed identity text for dumps and CacheKeep.
+            if (options.apiAccount || typeof init.body !== 'string')
+                return scope.redactResponse(await fetch(input, init));
+            return scope.redactResponse(await sendWithRequestGzip({
+                url: input,
+                body: init.body,
+                headers,
+                latch: getRequestGzipLatch(getRequestGzipLatchPath(options.storagePath)),
+                send: (wireBody, wireHeaders) => fetch(input, { ...init, body: wireBody, headers: wireHeaders }),
+            }));
         };
         let response;
         try {
@@ -778,7 +790,7 @@ async function executeWithFallback(options) {
         if (primaryAvailable() &&
             !stickyQuotaSnapshotIsFresh(mainEntry?.quota, storage, Date.now(), modelId)) {
             try {
-                mainQuota = await quotaManager.refreshMain(mainAccountId, '');
+                mainQuota = await quotaManager.refreshMain(mainAccountId, '', undefined, 'admission');
             }
             catch { }
         }
@@ -803,7 +815,7 @@ async function executeWithFallback(options) {
             let accountQuota = quotaManager.getFallback(account.id, account)?.quota ?? account.quota;
             if (!stickyQuotaSnapshotIsFresh(accountQuota, storage, Date.now(), modelId)) {
                 try {
-                    accountQuota = await quotaManager.refreshFallback(account.id, '', account);
+                    accountQuota = await quotaManager.refreshFallback(account.id, '', account, 'admission');
                 }
                 catch { }
             }
@@ -1150,7 +1162,7 @@ async function executeWithFallback(options) {
         let mainQuota = quotaManager.getMain(mainAccountId)?.quota;
         if (!mainQuota || quotaManager.isMainStale(options.model.id)) {
             try {
-                mainQuota = await quotaManager.refreshMain(mainAccountId, '');
+                mainQuota = await quotaManager.refreshMain(mainAccountId, '', undefined, 'admission');
             }
             catch { }
         }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@cortexkit/pi-anthropic-auth",
-  "version": "2.0.3",
+  "version": "2.1.0",
   "type": "module",
   "repository": {
     "type": "git",
@@ -36,7 +36,7 @@
     "prepublishOnly": "bun run build"
   },
   "dependencies": {
-    "@cortexkit/anthropic-auth-core": "2.0.3"
+    "@cortexkit/anthropic-auth-core": "2.1.0"
   },
   "peerDependencies": {
     "@earendil-works/pi-ai": ">=0.86.1 <2",